Oracle Linux 8 : grafana (ELSA-2020-1659)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1659 advisory. - include fix for CVE-2019-15043 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that Nessus has no...

K00843201: Grafana vulnerability CVE-2019-15043

Security Advisory Description In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana. CVE-2019-15043 Impact An unauthorized user may be able to leverage the Grafana...

CentOS 8 : grafana (CESA-2020:1659)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:1659 advisory. - grafana: incorrect access control in snapshot HTTP API leads to denial of service CVE-2019-15043 Note that Nessus has not tested for this issue but has instea...

Exploit for Missing Authentication for Critical Function in Grafana

CVE-2019-15043 POC Description Proof of concept scan to c...

openSUSE: Security Advisory for grafana, (openSUSE-SU-2020:0892-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

grafana security, bug fix, and enhancement update

6.3.6-1 - add weak depenency on grafana-pcp - add patch to mute shellcheck SC1090 for grafana-cli - update to 6.3.6 upstream community sources, see CHANGELOG 6.3.5-1 - drop uaparser patch now its upstream - add xerrors patch, see https://github.com/golang/go/issues/32246 - use vendor sources on...

Moderate: Red Hat Security Advisory: grafana security, bug fix, and enhancement update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

RHEL 8 : grafana (RHSA-2020:1659)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1659 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. The following packages have been upgrad...

co-bay.biz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-975337 Security Researcher devl00p Helped patch 3023 vulnerabilities Received 10 Coordinated Disclosure badges Received 15 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting co-bay.biz website and it...

Fedora Update for grafana FEDORA-2019-0bb6b876da

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 29 : grafana (2019-77d612eab4)

Security fix for CVE-2019-15043 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. C Tenable Network...

CVE-2019-15043

Grafana HTTP API in Grafana 2.x–6.x (pre-6.3.4) allows unauthenticated use, enabling a denial-of-service through the Snapshot API. The advisory notes affected versions and fixes in Grafana 5.4.5 and 6.3.4. Mitigation includes updating to these versions (or later) and applying recommended config c...

Security fix for the ALT Linux 9 package grafana version 6.3.4-alt1

6.3.4-alt1 built Aug. 30, 2019 Alexey Shabalin in task 236877 Aug. 30, 2019 Alexey Shabalin - 6.3.4 Fixes: CVE-2019-15043...

Security fix for the ALT Linux 10 package grafana version 6.3.4-alt1

Aug. 30, 2019 Alexey Shabalin 6.3.4-alt1 - 6.3.4 Fixes: CVE-2019-15043...

[ASA-201908-21] grafana: denial of service

Arch Linux Security Advisory ASA-201908-21 ========================================== Severity: Medium Date : 2019-08-30 CVE-ID : CVE-2019-15043 Package : grafana Type : denial of service Remote : Yes Link : https://security.archlinux.org/AVG-1034 Summary ======= The package grafana before versio...